2nd try - DPS: need to have multitple certificate mappings/search methods
My 6.3 DPS is configured to authentificate end-users through SASL binds and to request a client certificate.
I need to use 4 user attributes (cn,sn,givenname,ou) defined in the backend LDAP directory to map certificates to LDAP entries.
The problem is that some servers are also connecting through DPS but their certificate doesn't contain any givenname attribute.
So, they can not be authenticated by DPS which rejects their connections.
I wish we could define multiple certificate mapping strategies in DPS (or at least a prefered and a default strategy) in order to have
a workaround in such a situation.
Any plan to implement that feature or any suggested workaround (other than creating new server certificates and entries with a givenname) ?
Here's what I see in the access and error log:
Access log:
[07/Jan/2010:15:48:35 +0100] - CONNECT - INFO - conn=309 client=217.108.164.186:47961 server=rct-31.gipc.hst.fluxus.net:1636 protocol=LDAPS
[07/Jan/2010:15:48:35 +0100] - PROFILE - INFO - conn=309 assigned to connection handler cn=Gestionnaire de connexion ultime,cn=connection handlers,cn=config
[07/Jan/2010:15:48:35 +0100] - OPERATION - INFO - conn=309 op=0 BIND dn="" method="SIMPLE" version=3
[07/Jan/2010:15:48:35 +0100] - OPERATION - INFO - conn=309 op=0 BIND RESPONSE err=0 msg="" etime=0
Error log:
[07/Jan/2010:15:48:01 +0100] - EXCEPTION - DEBUG - Exception thrown from thread Connection Handler 1 for Listener Thread 0.0.0.0:1389
javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?
com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:166)
com.sun.net.ssl.internal.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1356)
com.sun.net.ssl.internal.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1324)
com.sun.net.ssl.internal.ssl.SSLEngineImpl.closeInbound(SSLEngineImpl.java:1263)
com.sun.directory.proxy.extensions.LDAPClientConnection.disconnect(LDAPClientConnection.java:1541)
com.sun.directory.proxy.extensions.LDAPClientConnection.disconnect(LDAPClientConnection.java:1482)
com.sun.directory.proxy.extensions.LDAPConnectionHandler.runThread(LDAPConnectionHandler.java:457)
com.sun.directory.proxy.util.DistributionThread.run(DistributionThread.java:225)
[07/Jan/2010:15:48:36 +0100] - EXCEPTION - DEBUG - Exception thrown from thread Connection Handler 1 for Listener Thread 0.0.0.0:1636
java.io.IOException: Received CLOSED during initial handshaking
com.sun.directory.proxy.extensions.LDAPClientConnection.doHandshake(LDAPClientConnection.java:398)
com.sun.directory.proxy.extensions.LDAPClientConnection.read(LDAPClientConnection.java:1229)
com.sun.directory.proxy.extensions.LDAPConnectionHandler.runThread(LDAPConnectionHandler.java:346)
com.sun.directory.proxy.util.DistributionThread.run(DistributionThread.java:225)
[07/Jan/2010:15:48:36 +0100] - EXCEPTION - DEBUG - Exception thrown from thread Connection Handler 1 for Listener Thread 0.0.0.0:1636
java.io.IOException: Received CLOSED during initial handshaking
com.sun.directory.proxy.extensions.LDAPClientConnection.doHandshake(LDAPClientConnection.java:398)
com.sun.directory.proxy.extensions.LDAPClientConnection.disconnect(LDAPClientConnection.java:1547)
com.sun.directory.proxy.extensions.LDAPClientConnection.disconnect(LDAPClientConnection.java:1482)
com.sun.directory.proxy.extensions.LDAPConnectionHandler.runThread(LDAPConnectionHandler.java:457)
com.sun.directory.proxy.util.DistributionThread.run(DistributionThread.java:225)
Unfortunately, since I don't have access to the back-end DS access log, should I see more details (of interest !) on the DPS side
with a higher log level ?
From my understanding and with my DPS config, when DPS chooses the "Gestionnaire de connexion ultime" connection handler, it means
it hadn't been able to map the certificate's owner to an LDAP entry. (This connection handler has the lowest priority in my DPS configuration).
I've to check (with my customer), but it could be that with the existing back-end DS content, the problem is that when DPS searches for the certificate's owner LDAP entry with only 3 attributes, it's returned more than a single entry.
Actually, otherwise, since I don't see any obvious problem in the error log, and thanks to your feedback, I can't see any other possible problem,
provided that the customer is confident in the fact that there's an entry with the right certificate in the DS back-end .
Similar Messages
-
DPS: need to have multitple certificate mappings/search methods
My 6.3 DPS is configured to authentificate end-users through SASL binds and to request a client certificate.
I need to use 4 user attributes (cn,sn,givenname,ou) defined in the backend LDAP directory to map certificates to LDAP entries.
The problem is that some servers are also connecting through DPS but their certificate doesn't contain any givenname attribute.
So, they can not be authenticated by DPS which rejects their connections.
I wish we could define multiple certificate mapping strategies in DPS (or at least a prefered and a default strategy) in order to have
a workaround in such a situation.
Any plan to implement that feature or any suggested workaround (other than creating new server certificates and entries with a givenname) ?My 6.3 DPS is configured to authentificate end-users through SASL binds and to request a client certificate.
I need to use 4 user attributes (cn,sn,givenname,ou) defined in the backend LDAP directory to map certificates to LDAP entries.
The problem is that some servers are also connecting through DPS but their certificate doesn't contain any givenname attribute.
So, they can not be authenticated by DPS which rejects their connections.
I wish we could define multiple certificate mapping strategies in DPS (or at least a prefered and a default strategy) in order to have
a workaround in such a situation.
Any plan to implement that feature or any suggested workaround (other than creating new server certificates and entries with a givenname) ? -
2nd try - DPS 7 dpadm add-virtual-transformation not working as expected
I use DPS 7.0 B2009.1104.2146 on RHEL 4 update 8. (32 bits)
I have an LDAP back-end where X509 user certificates are stored in either the usercertificate;binary attribute or the certAuth;binary attribute.
I want my DPS to authenticate users thanks to their personal certificate, with SASL external BIND method. So, I need DPS 7 to be able to
search the user certificate in two different attributes.
Since it's not possible, (the cert-search-user-attr property is single-valued, unfortunately ), I 've tried to setup a virtual transformation, to
have both physical attribute values in a single virtual attribute.
The problem is that both physical attributes have the ";binary" qualifier and DPS doesn't seem to like it.
When searching for the virtual attribute through DPS, DPS creates and return it, but I get garbage/wrong values:
Transformation configuration:
-bash-3.00$ dpconf get-virtual-transformation-prop vue-P0 mapping_add-attr_certauth
action : add-attr
attr-name : certauth;binary
internal-value : none
model : mapping
view-value : ${usercertificate;binary}
LDAP search straight to the LDAP back-end:
-bash-3.00$ ldapsearch -p myport -h myldaphost -b "dc=my namingcontext" cn=sslconnect
version: 1
dn: cn=sslconnect.gip-cps.fr,......
objectClass: top
cn: sslconnect
userCertificate;binary:: MIIC/zCCAmigAwIBAgIQMDAwMTIwNzkwMEDUnWNGsjANBgkqhkiG
9w0BAQUFADA/MQswCQYDVQQGEwJGUjEVMBMGA1UEChMMR0lQLUNQUy1URVNUMRkwFwYDVQQLExBB
Qy1DTEFTU0UtNC1URVNUMB4XDTA5MDUyODA4NDMyOFoXDTEyMDUyODA4NDMyOFowazELMAkGA1UE
LDAP search through the DPS 7 server:
-bash-3.00$ ldapsearch -p 1389 -b "dc=my namingcontext" cn=sslconnect
version: 1
dn: cn=sslconnect
objectClass: top
cn: sslconnect
userCertificate;binary:: MIIC/zCCAmigAwIBAgIQMDAwMTIwNzkwMEDUnWNGsjANBgkqhkiG
9w0BAQUFADA/MQswCQYDVQQGEwJGUjEVMBMGA1UEChMMR0lQLUNQUy1URVNUMRkwFwYDVQQLExBB
Qy1DTEFTU0UtNC1URVNUMB4XDTA5MDUyODA4NDMyOFoXDTEyMDUyODA4NDMyOFowazELMAkGA1UE
certauth;binary:: MO+/vQLvv70w77+9Amjvv70DAgECAhAwMDAxMjA3OTAwQNSdY0bvv70wDQY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...Hi there
I'm having exactly the same problem here (AIR 3.6, Flash Builder 4.7). But somehow I don't really feel comfortable to write my own LocalizationManager when there's a built-in solution around. So I'm still trying to find the problem.
I noticed that when I update the compiler argument (-locale=en_US,de_DE ), the ResourceManager *sometimes* switches the language, but somehow randomly and definitely not based the value set for localeChain.
Furthermore, ResourceManager.getInstance().getLocales() does not return anything.
The strange thing: Even when I do not include the localization resources ('locale/{locale}' in ActionScript Build Path -> Source Path) the resources in 'locale/en_US' or 'locale/de_DE' are available to the ResourceManager.
Anyone with similar experiences?
I'm grateful for any hint! -
Need for NPS server certificate with PEAP-MS-CHAPv2
Hi,
I have a question about a small setup I'm currently testing. In a Wireless access with 802.1X authentication based on PEAP/MS-CHAPv2, and a NPS server (MS server 2012R2), I've noted reading technet documentation that the NPS server or other RADIUS server
do have a certificate (issued by a 3rd party CA or by an AD CS environment).
However, it remains for me a point I would like to clarify (sorry I surely have a bad understanding of documentation). If my client is configured for not "validate server certificate", do I still need to have a certificate on the NPS server ?
Well, I know it is not secured, but this will permit me to test without configuring an AD CS, and without buying a certificate.
Many thanks in advance for your answer.
Regards,
FabriceYou also need a server certificate in this case as the protection in Protected EAP is due to the encryption of the TLS session.
Not validating the server certificate just means that no additional check of the name is done, so the client would be able to connect to any RADIUS server - given that its certificate chain is valid. But the certificate chain as such is checked as in every
SSL handshake.
You don't need a certificate issued by a commercial CA though - you could use an inhouse PKI. For tests you could use a self-signed certificate as well.
Edit: If you want to test self-signed certificates the easiest way is probably to install the web server role and use its built-in option to create a self-signed certificate.
Elke -
I have an iphone 3g I tried to down load an app for netflix and it said I need to have ISO 5 but my phone has ISO 4.2.1 and when I try to update it on my computer through itunes I get message saying I have current version how or what can I do do to get an app the lets me watch netflix on my iphone 3g .Is there an sulision to my problem? I also tried another app with another name diff from netflix and I got the same message saying i need ISO 5 .Someone please help thank you
Thank you for your help are you aware of any apps that will work the iso 4.2.1 system that will let you watch movies on the phone. Also I tried to down load something else the other day and got message that Safari wont let you open this is ther any to see if i have the latest safari on my phone?
-
I have a 2nd generation Ipod.
I have it connected to my computer and see (my name) ipod on my screen.
Everytime I try to add a new song to the Ipod, this message comes up and I am not sure what to do:
The Ipod, (my name) is synced with another ITunes library on A74F65. Do you want to erase this Ipod and sync with this ITunes Library?
An Ipod can be synced with only one ITunes library at a time. Erasing and syncing replaces the contents of this IPod with the contents of this ITunes library.
Then it asks me if I want to delete and sync.
I am not sure what to do for fear of erasing everything I have put on my Ipod.
I would appreciate if someone could help me out.If I understand you correctly, you are trying to use iTunes to play the Music in your iPod but which is not in your itunes library. I don't think Apple design iTunes for use in your way. As to put and play music in iPod, the music has to be in iTunes first, so you play music in the iTunes music Library. the window with Ipod music is just to show you which music are already in the Ipod, in case you want to Manually Manage your huge music library.
Here is the iPod/iTunes manual from the Apple Support Site.
http://manuals.info.apple.com/en_US/iPod_Features_Guide.pdf
Have A NICE DAY! -
I am trying to sign in to attend a session and it says 'Invalid user or password. Please try again.' I have reset my password and it still doesn't work. I created a new AdobeID and it still doesn't work. I need to attend this training. How can I get in?
Sorry to hear about this problem. What site are you trying to log in on? Is it a Mozilla site? Usually you don't need to register or sign in to a Mozilla site to use Firefox. Usually you can just go straight to where you want to go.
-
i have a ipod touch 2nd generation 8gb 4.2.1 im new to itunes i made a itunes account but it says i need a payment method is there anyway i can use my paypal if not is there a way to not have to use a payment method for itunes store please help ty
Create a NEW account using these instructions. Make sure you follow the instructions. Many do not and if you do not you will not get the None option. You must use an email address that you have not used with Apple before.
Creating an iTunes Store, App Store, iBookstore, and Mac App Store account without a credit card
Using those instructions you may also be able to select PayPal if that is allowed in your country. -
When I try to upgrade and install to iOS 5.1, error message prompt "operation stop running". I have tried several time but failed. Also, would like to know why always need to have wifi access in order to upgrade the version of iPad iOS, what is the purpose of 3G then? This is really nonsense using wifi + 3G iPad. need help ! Thanks.
The file is too large to download via 3G. There is a 20MB limit with 3G. The purpose of having 3G is that you have internet access everywhere and do not need to be near a WiFi hotspot or network.
Not every single thing that you do every single minute of the day on the iPad involves downloading files larger than 20MB. You can surf the internet all day long sitting out in a park somewhere with 3G - but not with a WiFi only iPad - unless you use a hotspot with it.
Try turning off your firewall and anti virus software while you try to download the iOS update. -
I have the first generation ipod touch it's updated to the iOS 3.1.3. Anytime I try to download an app it says it needs to have iOS 4.3. We want to download apps for my daughter. Does anyone know of any children's apps for the iOS 3.1.3
Any joy ? I'm having same problem. Just bought two for my twins birthday and I think it was a big mistake!!!! Thanks
-
Do I need to have an anti-virus in my mac?
Do I need to have an anti-virus in my mac?
1. This comment applies to malicious software ("malware") that's installed unwittingly by the victim of a network attack. It does not apply to software, such as keystroke loggers, that may be installed deliberately by an intruder who has hands-on access to the victim's computer. That threat is in a different category, and there's no easy way to defend against it. If you have reason to suspect that you're the target of such an attack, you need expert help.
If you find this comment too long or too technical, read only sections 5, 6, and 10.
OS X now implements three layers of built-in protection specifically against malware, not counting runtime protections such as execute disable, sandboxing, system library randomization, and address space layout randomization that may also guard against other kinds of exploits.
2. All versions of OS X since 10.6.7 have been able to detect known Mac malware in downloaded files, and to block insecure web plugins. This feature is transparent to the user, but internally Apple calls it "XProtect." The malware recognition database is automatically checked for updates once a day; however, you shouldn't rely on it, because the attackers are always at least a day ahead of the defenders.
The following caveats apply to XProtect:
It can be bypassed by some third-party networking software, such as BitTorrent clients and Java applets.
It only applies to software downloaded from the network. Software installed from a CD or other media is not checked.
3. Starting with OS X 10.7.5, there has been a second layer of built-in malware protection, designated "Gatekeeper" by Apple. By default, applications and Installer packages downloaded from the network will only run if they're digitally signed by a developer with a certificate issued by Apple. Software certified in this way hasn't necessarily been tested by Apple, but you can be reasonably sure that it hasn't been modified by anyone other than the developer. His identity is known to Apple, so he could be held legally responsible if he distributed malware. That may not mean much if the developer lives in a country with a weak legal system (see below.)
Gatekeeper doesn't depend on a database of known malware. It has, however, the same limitations as XProtect, and in addition the following:
It can easily be disabled or overridden by the user.
A malware attacker could get control of a code-signing certificate under false pretenses, or could simply ignore the consequences of distributing codesigned malware.
An App Store developer could find a way to bypass Apple's oversight, or the oversight could fail due to human error.
For the reasons given above, App Store products, and other applications recognized by Gatekeeper as signed, are safer than others, but they can't be considered absolutely safe. "Sandboxed" applications may prompt for access to private data, such as your contacts, or for access to the network. Think before granting that access. OS X security is based on user input. Never click through any request for authorization without thinking.
4. Starting with OS X 10.8.3, a third layer of protection has been added: a "Malware Removal Tool" (MRT). MRT runs automatically in the background when you update the OS. It checks for, and removes, malware that may have evaded the other protections via a Java exploit (see below.) MRT also runs when you install or update the Apple-supplied Java runtime (but not the Oracle runtime.) Like XProtect, MRT is effective against known threats, but not against unknown ones. It notifies you if it finds malware, but otherwise there's no user interface to MRT.
5. The built-in security features of OS X reduce the risk of malware attack, but they're not absolute protection. The first and best line of defense is always going to be your own intelligence. With the possible exception of Java exploits, all known malware circulating on the Internet that affects a fully-updated installation of OS X 10.6 or later takes the form of so-called "trojan horses," which can only have an effect if the victim is duped into running them. The threat therefore amounts to a battle of wits between you and the malware attacker. If you're smarter than he thinks you are, you'll win.
That means, in practice, that you never use software that comes from an untrustworthy source, or that does something inherently untrustworthy. How do you know what is trustworthy?
Any website that prompts you to install a “codec,” “plug-in,” "player," "extractor," or “certificate” that comes from that same site, or an unknown one, is untrustworthy.
A web operator who tells you that you have a “virus,” or that anything else is wrong with your computer, or that you have won a prize in a contest you never entered, is trying to commit a crime with you as the victim. (Some reputable websites did legitimately warn visitors who were infected with the "DNSChanger" malware. That exception to this rule no longer applies.)
Pirated copies or "cracks" of commercial software, no matter where they come from, are unsafe.
Software of any kind downloaded from a BitTorrent or from a Usenet binary newsgroup is unsafe.
Software that purports to help you do something that's illegal or that infringes copyright, such as saving streamed audio or video for reuse without permission, is unsafe. All YouTube "downloaders" are in this category, though not all are necessarily harmful.
Software with a corporate brand, such as Adobe Flash Player, must be downloaded directly from the developer’s website. If it comes from any other source, it's unsafe.
Even signed applications, no matter what the source, should not be trusted if they do something unexpected, such as asking for permission to access your contacts, your location, or the Internet for no obvious reason.
6. Java on the Web (not to be confused with JavaScript, to which it's not related, despite the similarity of the names) is a weak point in the security of any system. Java is, among other things, a platform for running complex applications in a web page, on the client. That was always a bad idea, and Java's developers have proven themselves incapable of implementing it without also creating a portal for malware to enter. Past Java exploits are the closest thing there has ever been to a Windows-style virus affecting OS X. Merely loading a page with malicious Java content could be harmful.
Fortunately, client-side Java on the Web is obsolete and mostly extinct. Only a few outmoded sites still use it. Try to hasten the process of extinction by avoiding those sites, if you have a choice. Forget about playing games or other non-essential uses of Java.
Java is not included in OS X 10.7 and later. Discrete Java installers are distributed by Apple and by Oracle (the developer of Java.) Don't use either one unless you need it. Most people don't. If Java is installed, disable it — not JavaScript — in your browsers.
Regardless of version, experience has shown that Java on the Web can't be trusted. If you must use a Java applet for a task on a specific site, enable Java only for that site in Safari. Never enable Java for a public website that carries third-party advertising. Use it only on well-known, login-protected, secure websites without ads. In Safari 6 or later, you'll see a lock icon in the address bar with the abbreviation "https" when visiting a secure site.
Follow the above guidelines, and you’ll be as safe from malware as you can practically be. The rest of this comment concerns what you should not do to protect yourself from malware.
7. Never install any commercial "anti-virus" or "Internet security" products for the Mac, as they all do more harm than good, if they do any good at all. Any database of known threats is always going to be out of date. Most of the danger is from unknown threats. If you need to be able to detect Windows malware in your files, use one of the free anti-virus products in the Mac App Store — nothing else.
Why shouldn't you use commercial "anti-virus" products?
Their design is predicated on the nonexistent threat that malware may be injected at any time, anywhere in the file system. Malware is downloaded from the network; it doesn't materialize from nowhere.
In order to meet that nonexistent threat, the software modifies or duplicates low-level functions of the operating system, which is a waste of resources and a common cause of instability, bugs, and poor performance.
By modifying the operating system, the software itself may create weaknesses that could be exploited by malware attackers.
8. An anti-malware product from the App Store, such as "ClamXav," doesn't have these drawbacks. That doesn't mean it's entirely safe. It may report email messages that have "phishing" links in the body, or Windows malware in attachments, as infected files, and offer to delete or move them. Doing so will corrupt the Mail database. The messages should be deleted from within the Mail application.
An anti-virus app is not needed, and should not be relied upon, for protection against OS X malware. It's useful only for detecting Windows malware. Windows malware can't harm you directly (unless, of course, you use Windows.) Just don't pass it on to anyone else.
A Windows malware attachment in email is usually easy to recognize. The file name will often be targeted at people who aren't very bright; for example:
♥♥♥♥♥♥♥♥♥♥♥♥♥♥!!!!!!!H0TBABEZ4U!!!!!!!.AVI♥♥♥♥♥♥♥♥♥♥♥♥♥♥.exe
Anti-virus software may be able to tell you which particular virus or trojan it is, but do you care? In practice, there's seldom a reason to use the software unless a network administrator requires you to do it.
The ClamXav developer won't try to "upsell" you to a paid version of the product. Other developers may do that. Don't be upsold. For one thing, you should not pay to protect Windows users from the consequences of their choice of computing platform. For another, a paid upgrade from a free app will probably have the disadvantages mentioned in section 7.
9. It seems to be a common belief that the built-in Application Firewall acts as a barrier to infection, or prevents malware from functioning. It does neither. It blocks inbound connections to certain network services you're running, such as file sharing. It's disabled by default and you should leave it that way if you're behind a router on a private home or office network. Activate it only when you're on an untrusted network, for instance a public Wi-Fi hotspot, where you don't want to provide services. Disable any services you don't use in the Sharing preference pane. All are disabled by default.
10. As a Mac user you don't have to live in fear that your computer is going to be infected every time you install an application, read email, or visit a web page. But neither should you have the false idea that you will always be safe, no matter what you do. The greatest harm done by security software is precisely its selling point: it makes people feel safe. They may then feel safe enough to take risks from which the software doesn't protect them. Nothing can lessen the need for safe computing practices. -
how many problems do you need to have with a mac book pro to get it replaced i have had 6 problems and they say they have fixed everything and somthing new happends
I have had thehad the:
ram replaced
Battery
Audio
Trackpad
os operating system
fans
And they still won't replace the laptop for me worst buy ever but i have had a imac for 2 months and nothing at all wrong .You could try calling Apple and ask for Customer Relations.
From Readers Digest-February, 2005
How to Complain
You call customer service to complain about a product, and you hang up angrier than when you started. That’s customer rage, a feeling experienced by millions of people with a major complaint, says Scott Broetzmann, president an American firm that tells companies how to offer the best customer service. His secrets to getting good service:
Have a goal
If you want your product repaired, say so. Want an apology? Speak up.
Keep it short
Focus on one problem, and be succinct.
Stick with it
You have to invest the time it takes. Don’t get what you want? Ask for a supervisor.
Skip ultimatums
Don’t threaten not to do business with them again. Why should they help you if you won’t buy from them in the future?
Plead your case
Many companies have information such as how much money you’ve spent with them and how often you complain. If you’re a good customer, they may be more willing to help.
Be nice
You’re unlikely to get what you want if you’re rude.
Good luck. -
I teach Continuing education classes to Real Estate agents and I need to issue them certificates at the class, whihc need to be signed by me and it needs to contain their info on the certificate. The certificate is currently saved in a word format.What i'm trying to accomplish is to do a "mail merge " ( as some classes i have as many as 150 attendees) for the document, digitally sign each one with my signature on the certificate and then e-mail it out to the respective attendees. can this be done? if so How?
This is the step that I took after inputting my signature.
On the right, after saving my document, I click "Get Others to Sign." I was confused because it says that it's powered by EchoSign. Like I stated before, my clients are able to sign this document when I send it to them, but it is returned to me with their signature (not in the signature field, but at the end of the document), and my signature is missing. I tested this on myself - my signature is missing when they receive it. -
what settings do I need to have to access Ashford University's student portal using either Safari or Firefox when I get the following message: The system is unable to process your response at this time. If you feel you have received this message in error. Please contact your System Administrator, or try again at a later time.
I am able to get to the Ashford University login display with no difficulties with both Firefox and Safari. Obviously without a student password I cannot go any further. If you can do the same, then clearly the problem is at the other end. If that is the same case with you, then there is no advice that I can give you but to stir the pot as best you can.
Ciao. -
Cannot open Photoshop Elements. Receive error message 400 (Photoshop services are currently unavailable. Please try again later (I have) or check your network connections (they are OK). Error 400.
Photoshop.com is no longer available. The service transferred to Revel.
Ignore the sign-in altogether.
You may need to turn off Sync in Organizer prefs if you have it activated.
Maybe you are looking for
-
Yahoo home page and yahoo email is not displaying correctly. It had been working fine until Saturday 9/10. When i load yahoo home page it will display content but some is not clickable and is not displayed correctly. In my email it will show the cont
-
How to remove application from Open With?
Hi, I added by accident a wrong application to a file type in Finder. Now I would like to remove this entry from the files Open With list. How could this be done? Thanks and best regards Ralph
-
I have Oracle8i installed on Windows 2K and can connect to the database by using SYSTEM, ANYPASSWORD and ODBC:POLITE as the Host String. When I installed Forms6i, I have problem connecting to the database. Can any body help! Thanks, Sunny null
-
I need help with Adobe Reader X......
I'm not sure what is going on, but for a while now (seems like the last two updates to Reader) my Adobe Reader is acting nuts......!! First of all, I can not seem to get it to work. When I pull up a .pdf file, I can see the file but then when I try
-
Hi, I recently bought a new MacBook Pro. I transferred all my data from my old PC to the MacBook using the Migration assistant. After that I signed in with my AppleID. Beneath that it had a box saying "Allow this AppleID to change the password of thi